SB 369 aims to ensure that certain telehealth providers can enroll as Medicaid providers in North Carolina. The bill specifies that individual health care providers, licensed by the state and offering services exclusively through telemedicine, do not need a physical presence in the state to be eligible for Medicaid enrollment. Additionally, medical provider groups that exclusively offer telemedicine services will not be required to have an in-state service address to enroll as Medicaid provider groups. This measure directly affects telehealth providers and Medicaid recipients by clarifying requirements for remote healthcare services.
HB 462, titled the "Personal Data Privacy/Social Media Safety Act," aims to protect North Carolinians by enacting two main components: the Personal Data Privacy Act and the Social Media Safety Act. The provided text details the "North Carolina Personal Data Privacy Act," which is set to take effect on January 1, 2026. This act establishes definitions for key terms such as "personal data," "biometric data," "precise geolocation data," and "consent," affecting North Carolina residents as "consumers" and entities that process their data as "controllers." It also outlines the framework for consumer rights regarding their personal data.
HB 934, the "Artificial Intelligence Regulatory Reform Act," establishes new regulations related to artificial intelligence and deepfakes. The bill creates a new criminal offense for the unlawful creation or distribution of "deepfakes" - images or videos created to deceive - without consent, when done to cause harm or influence an election. It also grants civil liability immunity to developers of artificial intelligence products when a "learned professional" uses their product to provide services. Under this provision, the learned professional would be solely responsible for any damages to their client resulting from errors generated by the AI product. This legislation affects individuals who create or distribute deepfakes, as well as AI product developers, licensed professionals, and their clients.
HB 301, titled "Social Media Protections for Minors Under 16," aims to regulate social media platforms for minors in North Carolina. The bill prohibits social media platforms from allowing children under 14 years of age to create accounts and requires them to terminate existing accounts for this age group, deleting their personal data. For minors aged 14 or 15, platforms must obtain parental or guardian consent before they can create or maintain an account. The North Carolina Department of Justice is responsible for enforcing these provisions, which allows for civil penalties and damages for violations, including potential lawsuits by affected minors.
HB 936 modifies North Carolina's laws governing telephone solicitations to specifically address robocalls and spam text messages. The bill defines "robocall" to include artificial or prerecorded voice messages, ringless voicemails, and scam texts, and applies new restrictions to "robocallers." It prohibits robocalls before 8:00 A.M. or after 9:00 P.M., forbids intimidating language, and prevents misleading caller identification. Additionally, it clarifies the requirements for "prior express written consent" needed for solicitors to contact individuals on the "Do Not Call" Registry, stipulating conditions for this consent.
House Bill 81 requires insurance institutions and agents to obtain written consent from applicants and policyholders before collecting, receiving, selling, or using vehicle telematics data. The bill mandates that individuals be notified how their telematics data will be used and that they can revoke consent at any time. Insurers must provide a reasonable means for individuals to revoke consent, which must be actioned within 24 hours. A violation of these provisions would be considered an unfair trade practice, with the act becoming effective October 1, 2025.
HB 860, the Social Media Control in Information Technology Act, requires social media platforms with over 1 million U.S. monthly active users to stop using North Carolina minors' (under 18) personal data for advertising or algorithm-driven content recommendations. It mandates platforms to provide clear, easy-to-use privacy tools allowing users to control data sharing, with special opt-in consent required for minors' data. The bill prohibits "dark patterns" in consent processes and defines strict terms like "personal information" to cover data ranging from location to health details. Violations would be treated as unfair business practices under North Carolina law, with funds appropriated for enforcement. The law directly affects major social media platforms operating in North Carolina, focusing on protecting minors' data privacy rather than addressing broader social media use.
HB 808, the NC Infrastructure Protection Act, prohibits North Carolina government entities from contracting with companies owned by citizens of China, Iran, North Korea, Russia, or countries later designated as threats. It specifically blocks foreign-owned companies from gaining access to critical infrastructure like electric grids, water treatment facilities, and cybersecurity systems. The bill also mandates criminal background checks for all individuals granted access to these systems, applying to government contracts and public utility operations. These requirements will take effect for new contracts after the bill’s passage, with background check rules for utilities needing to be implemented by October 2026.
HB 819 creates North Carolina's Longitudinal Data System, which links student education data (like test scores, graduation records, and course enrollment) with workforce data (such as employment and wages) to track student outcomes. It directly affects public schools, universities, the Department of Public Instruction, and workforce agencies by requiring them to share de-identified student data through this centralized system. Key provisions include strict privacy safeguards (complying with FERPA and HIPAA), mandatory data security plans, a 5-year limit on linking education and workforce data, and annual reporting requirements for the system's oversight body. The bill aims to improve education policy decisions while ensuring data privacy and security for students.
SB 117 updates North Carolina's Uniform Commercial Code to govern transactions involving "controllable electronic records" (e.g., digital assets like blockchain-based tokens or programmable contracts). It defines key terms like "controllable electronic record" and establishes rules for transferring control - requiring a buyer to have exclusive power to benefit from and restrict access to the record. The bill protects "qualifying purchasers" (those who buy in good faith for value) from claims by others over the same digital asset, while clarifying that standard filings under Article 9 of the Commercial Code do not create notice of ownership claims. This directly affects businesses and individuals engaging in digital asset transactions, excluding existing categories like bank accounts or electronic money from these new rules.
